Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144650.roa
File:                     AS144650.roa (raw, json)
Hash identifier:          +o3EvTrt84Klby2hO15iEzJK4nl6pFkTQPQmfzaPHfQ=
Subject key identifier:   88:F8:61:23:E7:A8:EE:1A:54:16:96:D7:87:1B:5C:0E:36:BB:B0:01
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EAECDD8FAB523F1A3EE0EE146400A21A1EDBF68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144650.roa
Signing time:             Fri 22 May 2026 04:08:06 +0000
ROA not before:           Fri 22 May 2026 04:03:06 +0000
ROA not after:            Fri 21 May 2027 04:08:06 +0000
asID:                     144650
IP address blocks:        240a:a7d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ae:cd:d8:fa:b5:23:f1:a3:ee:0e:e1:46:40:0a:21:a1:ed:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:06 2026 GMT
            Not After : May 21 04:08:06 2027 GMT
        Subject: CN=88F86123E7A8EE1A541696D7871B5C0E36BBB001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:c5:a7:5a:2d:37:f9:15:ba:e2:12:19:71:
                    a9:2d:a6:5f:f4:57:bf:a0:81:59:9f:d7:e8:82:ad:
                    05:85:86:74:5f:0f:7c:79:55:68:31:d3:50:8b:b1:
                    1c:7b:55:ca:a7:a5:fc:64:4d:35:38:7f:97:3a:f0:
                    18:e2:69:67:a8:91:c1:d6:e0:c5:9d:02:e0:23:79:
                    26:9a:0b:fe:87:3e:49:0d:92:78:cd:cc:38:e5:56:
                    97:55:4a:2a:9e:27:65:58:5e:76:05:25:c4:a6:67:
                    fc:a1:70:ab:22:e4:63:1d:d7:4d:93:6a:da:3f:04:
                    dc:7b:8c:f6:1e:d8:45:ef:c2:e5:db:15:51:e1:bc:
                    fd:6f:0f:25:6a:78:39:4e:5c:e2:69:71:0d:ac:04:
                    44:1d:f9:0a:bf:e6:16:17:34:3d:f8:f1:64:06:de:
                    22:95:3d:9f:d6:1a:fa:5d:ed:be:9b:fc:96:de:c7:
                    7e:67:0e:86:b6:fc:b9:50:c5:d4:34:43:eb:bd:6c:
                    f8:78:e2:9d:53:10:db:b0:d1:9a:39:6f:da:00:fd:
                    ee:f4:0c:f3:39:e9:b6:ac:2b:e5:f7:50:fd:eb:97:
                    11:d4:f0:64:19:6f:27:b7:3c:23:5b:88:a7:88:ce:
                    33:b3:c9:06:4a:b5:27:76:9f:ad:df:03:ad:8c:f4:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:61:23:E7:A8:EE:1A:54:16:96:D7:87:1B:5C:0E:36:BB:B0:01
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:ac:bd:fc:28:09:80:8c:9c:98:90:f9:6c:f2:be:a1:c7:
         01:47:b8:76:a7:b5:48:11:5f:c6:a3:a6:04:05:07:14:fc:5e:
         a8:ec:63:51:ce:2b:d2:27:04:a4:e4:4a:60:65:35:41:2f:2a:
         dd:f8:9d:3d:9e:01:71:8c:40:46:f0:9e:87:02:a0:30:bd:8b:
         ac:d5:af:c7:dd:dc:dc:7b:37:73:24:d7:8a:28:3d:3d:00:18:
         b9:83:6f:4b:18:29:2b:a7:9f:b9:1f:0b:5a:b6:a9:7d:65:60:
         8b:06:49:3b:ff:8a:f8:c4:83:be:ff:de:e7:ab:e1:44:9a:d6:
         d5:d8:1a:66:02:fa:44:0d:bc:d5:80:e8:6b:c6:b0:d7:13:e9:
         97:b5:e4:ad:24:91:f7:e6:ee:e5:4b:6b:21:18:9d:7d:67:6f:
         35:1e:99:79:3c:2b:5e:51:04:8b:e9:f9:03:a8:28:fc:35:fb:
         a6:2a:19:a5:11:07:4b:6f:4f:52:66:93:44:d8:1d:8a:e1:7f:
         a6:68:0c:f0:a2:aa:ce:52:99:4a:3d:7e:2a:1f:6c:78:7a:00:
         d8:e5:a7:2c:20:ba:f0:2f:c1:3b:f8:23:9d:c0:9e:9b:8d:eb:
         59:8c:87:62:e1:89:2f:3b:a2:66:b7:6a:bf:26:11:b2:49:20:
         dd:2b:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client